Genviral - Social Media Automation

• Analyzed: May 12, 2026, 4:07 AM
• Findings: 1
• Version: 1.0.0
• Hash: 921848d42a455ecdb7a897216f89a35a46ff373d3569288fab093bb0db32da8e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as **benign**. The `genviral-skill` is a comprehensive automation tool for the Genviral Partner API, designed for content creation, multi-platform posting, and performance analytics. The `scripts/genviral.sh` file, which contains the core logic, demonstrates robust input validation and safe command execution practices, primarily using `jq -n --arg` for JSON payload construction and properly quoted `curl` commands for API interaction. While the script sources `~/.config/env/global.env`, it explicitly uses `GENVIRAL_API_KEY` from the environment, and there's no evidence of attempts to read or exfiltrate other sensitive environment variables or arbitrary files. The `SKILL.md` and `cron-setup.md` files contain instructions for the AI agent to manage content, track performance, and adapt strategy by reading and writing to specific local files (e.g., `performance/log.json`, `hooks/library.json`) within the skill's directory. These instructions are entirely aligned with the stated purpose of the skill and do not contain any directives for unauthorized actions, data exfiltration, or malicious behavior.